|
|
Posted by livefreeordie on 10/09/06 13:07
Johnny wrote:
> "livefreeordie" <jpittman2@gmail.com> wrote in message
> news:1159900665.186551.50290@c28g2000cwb.googlegroups.com...
> > Hi,
> >
> > I'm part of a 5-person team that develops websites for our company. I
> > need to use the ftp_* functions to find some files on another file
> > server. I need to authenticate to the file server using my username &
> > password but I don't want to have it right there in the script in plain
> > text.
> >
> > Any suggestions?
> >
>
> if you are trying to hide from your team members then best to take input
> from a form and feed those to your script.
Well this is part of a tool that is run by the user community - it just
access files on another server. I really don't want to make each user
enter another username and password - I want to just use my own
credentials.
> making an include to another file with the passwords etc won't help if the
> perople you are hiding this info from have access to the same directories.
Exactly. I've temporarily solved the problem by making the include
file owned by user 'nobody' - under which the web server runs, and
changing the mods to 600 . I have sudo privs to do this -
unfortunately so do other people on the team - so if they really wanted
to , they could get at my pwd. But I'm not entirely sure they would
know how. ;)
We're moving to a new server where the Apache will run under a
dedicated username. When we do that, I can just use its own username &
password since it's known among our web team anyway.
Navigation:
[Reply to this message]
|